Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e3138352e3136342e302f32322d3332203d3e20323632373733.roa
File:                     3133382e3138352e3136342e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          fiNYEX/fS7+IfrXPdIZnsjGyb9ZZ/hL7vON3tO4JuS8=
Subject key identifier:   94:5A:67:61:B8:53:83:C5:F6:3F:DF:23:D9:82:DA:66:4B:D9:AD:59
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       16FEFA6B5F143E756909E580569571CE2946D4C7
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e3138352e3136342e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 11 Aug 2025 15:46:58 +0000
ROA not before:           Mon 11 Aug 2025 15:41:58 +0000
ROA not after:            Mon 10 Aug 2026 15:46:58 +0000
asID:                     262773
IP address blocks:        138.185.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:fe:fa:6b:5f:14:3e:75:69:09:e5:80:56:95:71:ce:29:46:d4:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 11 15:41:58 2025 GMT
            Not After : Aug 10 15:46:58 2026 GMT
        Subject: CN=945A6761B85383C5F63FDF23D982DA664BD9AD59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:55:0e:97:de:b0:03:25:3b:be:a3:d3:56:
                    c2:a1:14:57:89:11:fb:df:19:75:dd:63:78:2a:bb:
                    7f:f4:18:40:82:2a:7a:7c:83:d9:1c:a0:c6:b6:11:
                    22:58:6f:a2:80:90:6f:20:3c:d9:a4:07:f9:05:a6:
                    6c:50:b7:fe:cf:26:a9:d8:62:22:6b:36:45:1d:31:
                    e6:c4:1e:21:2f:91:cb:d1:1b:9d:ac:05:04:81:e9:
                    7d:55:a1:62:82:5f:f9:f1:ce:69:47:7f:71:0c:ce:
                    10:63:fc:ee:8a:1c:0c:00:b6:f3:a0:93:8d:e9:c8:
                    7c:df:ad:0b:ab:86:2d:5c:4e:9f:46:0c:e3:0d:06:
                    73:cf:9b:4e:e5:af:ed:9c:dd:a2:8e:15:eb:3e:8d:
                    e3:26:f8:a9:9b:f5:37:08:b8:16:de:86:6f:01:08:
                    92:df:9e:9d:7e:3e:70:88:b3:19:11:2c:21:4f:87:
                    52:db:e5:52:22:b0:6d:d1:64:67:6e:f0:04:57:2c:
                    90:64:52:ce:bc:ad:05:7f:06:b7:5f:58:e7:5b:63:
                    52:39:e6:26:da:27:06:a0:95:fe:31:0b:9b:a4:82:
                    71:28:6f:d3:5e:eb:09:81:57:fa:58:e2:d2:3a:9f:
                    71:25:42:d2:e3:9b:fe:dc:cc:ee:fd:0a:80:87:65:
                    52:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5A:67:61:B8:53:83:C5:F6:3F:DF:23:D9:82:DA:66:4B:D9:AD:59
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e3138352e3136342e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:04:2e:fa:e6:82:6b:ce:12:61:87:27:e8:64:18:5c:e8:9a:
         ea:1f:68:34:73:4a:e2:69:99:45:3e:b9:db:d9:42:03:8f:5e:
         fd:0f:e3:d8:ad:5e:42:8c:d0:75:cd:61:bf:f3:e0:ee:21:d6:
         89:fe:b8:b9:40:e0:54:4c:d0:32:6f:1d:90:69:dd:bb:c1:58:
         5c:fd:93:71:43:e4:e6:9b:1a:03:2b:af:3e:a6:45:1a:fc:72:
         fd:9f:91:c6:9c:6b:61:0a:5f:9b:33:3c:42:d5:94:1c:bc:34:
         4b:cc:c8:9a:65:75:a8:7a:44:19:c7:f4:72:54:ca:ea:4b:4d:
         1e:4f:83:00:45:79:32:52:49:84:fd:91:27:61:ed:fe:83:5b:
         97:33:36:78:23:f5:62:38:7a:61:67:c6:85:90:cf:a1:80:f3:
         11:57:b3:f6:ba:07:ce:f6:2e:cb:3b:99:08:b5:5f:75:db:70:
         2c:ed:81:ab:db:8f:36:ed:4b:47:15:05:2b:68:f2:6c:4e:94:
         34:26:a1:c3:6a:6a:e4:62:26:42:d3:c4:6c:71:5b:48:f0:e4:
         07:6c:47:af:82:09:b6:0c:d5:ec:f0:9e:98:6e:a7:e9:67:a7:
         37:30:bd:df:92:14:0e:1e:55:5e:3c:c7:32:b6:05:2f:ee:80:
         be:7a:9a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:24:25 2025 by rpki-client